Video marketing agency compliance checks for UK campaigns

What to take away

Who the rules apply to

A video marketing agency sits between the brand and the audience. If your team writes the script, books the shoot, edits the cut or buys the media space, the rules attach to that work. The name on the invoice does not decide the duty.

In England, the main regulators are the ASA for advertising and the ICO for data protection. The Competition and Markets Authority (CMA) covers consumer law.

Scotland, Wales and Northern Ireland share most of these frameworks, though enforcement priorities vary.

Our companion guide to video marketing agencies UK regulations in England maps which body holds which power and where the boundaries sit.

Size does not change the duties. A three-person studio and a fifty-person agency both have to keep claims honest, handle personal data lawfully and engage people on proper terms. What changes is how much process you need to stay consistent.

Subcontracting does not transfer the duty either. If you brief a freelance crew or a white-label editor, the client still looks to you for the finished campaign. Pass the relevant obligations down through your supplier terms.

Where an ASA ruling names a business, it is usually the advertiser. Agencies can still be drawn in when they prepared or placed the material, so keep a record of who approved the final cut and on what evidence.

Advertising and disclosure rules

The ASA writes the CAP Code for non-broadcast advertising and the BCAP Code for broadcast. Both cover video ads on social platforms, YouTube, connected TV and podcast video. Ads must be obviously identifiable, and claims about products, prices or results must be capable of substantiation.

Sanctions scale with the seriousness of the breach and any repeat offending. The ASA's page on sanctions available to the ASA lists the tools at its disposal, from requiring an ad to be amended or withdrawn to referring a persistent offender to Trading Standards.

Creator and influencer work falls under the same codes when there is a commercial arrangement. An agency that briefs a creator should agree the disclosure wording in advance and put it in the contract. Our guide to a video marketing agencies disclosure policy shows how to set those commitments out in a form clients and creators can both sign.

Sector rules add another layer. The Financial Conduct Authority (FCA) regulates financial promotions; where a promotion requires approval, it must be approved by an authorised person with the appropriate permission, unless an exemption applies. Alcohol advertising must not suggest that drinking brings success. Ask for compliance sign-off before the shoot, not after the edit.

Testimonials and comparison claims are frequent traps. A testimonial must reflect a genuine opinion, and a comparison must be verifiable and like for like rather than selective.

Television bookings bring a further step. Ofcom is the UK broadcast regulator, and ads due to run on commercial television go through pre-clearance with Clearcast before broadcast. Our article on video marketing agencies advertising rules breaks down those clauses in more detail, including how broadcast clearance differs from social placement.

Data protection and online safety

Video campaigns collect personal data in several ways. Lead forms, landing pages, pixel tracking, email capture and viewing analytics all create records about real people. The UK GDPR and the Data Protection Act 2018 govern how that data is handled. Organisations that process personal data may also need to register with the ICO and pay its data protection fee, unless exempt.

The ICO's guidance on online safety and data protection addresses information rights when platforms moderate online content. Separately, the Online Safety Act 2023 places duties on in-scope user-to-user services and search services, overseen by Ofcom; agencies should establish whether a platform or service, rather than the campaign itself, carries those duties. For children's data, consider the ICO's Age Appropriate Design Code (Children's Code), which applies to online services likely to be accessed by children.

The first practical question is whether the agency is a controller or a processor. Where the client decides why the data is collected, the agency usually acts as a processor and must work under a written contract. Where the agency sets the purpose, it is a controller and carries more of the liability.

Consent has to be specific, informed and easy to withdraw. Pre-ticked boxes, bundled consent and cookie walls that block access do not meet the standard. PECR sits alongside the UK GDPR for cookies and similar technologies, so a tracking pixel creates duties before anyone fills in a form.

International transfers need checking too. Where a campaign sends personal data to advertising platforms outside the UK, the transfer needs a valid mechanism. Examples include the UK extension to the EU-US Data Privacy Framework and the International Data Transfer Agreement.

Breach reporting catches agencies out as well. A personal data breach that risks people's rights must be reported to the ICO within 72 hours of the business becoming aware of it, and the client may need to be told at the same time.

Retention matters as much as collection. Decide how long raw footage with identifiable people, audition tapes and analytics exports are held, and delete them on schedule. If footage is reused in showreels or to train internal tools, the release needs to cover that use. Our guide to video marketing agencies data protection covers data mapping through the production pipeline.

Consumer law and the DMCC Act 2024

The DMCC Act 2024 changed how consumer protection is enforced. It gives the CMA the power to decide that a commercial practice is unfair and to impose penalties directly, rather than going to court for an injunction. It also adds fake reviews and drip pricing to the practices that are banned outright.

Agencies meet this law at two points. The first is the pitch, where claims about results, awards, client lists and case studies must be true and provable. The second is the campaign itself, where countdown timers, struck-through prices or purchased reviews can pull the agency into an investigation.

Contracts help but do not absolve. A clause stating that the client is responsible for the accuracy of claims about its own products clarifies who holds the facts. It does not remove the agency's duty to avoid producing misleading material.

Consumer law is reserved, so the DMCC Act applies in England, Scotland, Wales and Northern Ireland. Enforcement priorities can still vary between the nations, and the CMA publishes its own guidance on how it will use the new powers.

Employment and freelancer contracts

Production teams mix employees, workers and genuinely self-employed contractors, and each status carries different rights. Employees receive written particulars, minimum notice, statutory sick pay and protection from unfair dismissal once they have qualifying service.

The CIPD factsheet on contracts of employment explains what a written statement must contain and how an employment contract differs from a contract for services. It is a sensible reference when you review your own templates.

Pay must meet the statutory floor. Check the GOV.UK page on National Minimum Wage and National Living Wage rates for the current hourly rate for each age band before agreeing a day rate. A runner on a day rate must still receive at least the minimum wage for the hours worked, and travel between assignments can count as working time in some arrangements.

Status turns on the reality of the engagement, not the label on the contract. If the agency controls when, where and how the work is done, and the person is integrated into the team, a tribunal may find worker or employment status. Working time, rest breaks and holiday pay follow from that finding.

Off-payroll working rules can also apply where a contractor works through a personal service company. In some engagements the fee-payer responsibility shifts to the agency or the client, which changes who accounts for PAYE. Check the status before the contract starts, not after.

Client contracts and supplier terms

Every project should have a written contract covering scope, deliverables, revision rounds, timelines and the point at which the client approves the final cut. Ownership of raw footage, project files and the finished film should be stated, along with the licence the client receives for each channel.

Third-party rights are a common failure point. Stock footage, music tracks, typefaces and drone work all come with licences that limit territories, channels and duration. Check the licence covers paid media, organic social and any cinema or event screening.

Talent releases should cover the same ground. A performer who agreed to appear in one online film may not have agreed to a billboard or a paid social cut. Extend the release before you reuse the footage, not afterwards.

Payment terms belong in the contract too. Set out invoicing dates, the consequences of late payment and any interest you intend to charge, and state the rate, because a vague late fee is hard to enforce.

Insurance and indemnities round out the picture. Professional indemnity cover, public liability for shoot days and a data processing agreement with any supplier that touches personal data are worth having in place before the first day of filming. Our video marketing agencies tools and supplier guide for 2027 reviews the templates and platforms that support that paperwork.

How to build a compliance checklist

A checklist turns those duties into repeatable steps, and it works best at the start of a project rather than the end. Keep it short enough that a producer will use it, and file the completed version with the project documents.

Split the list by project stage rather than by regulation. A producer can act on a request to substantiate a claim, while a general instruction to follow the advertising codes gives them nothing to do that afternoon.

Pre-production checks

The substantiation step slips most often, because clients rarely hold evidence in a form a regulator would accept. Chase it before the shoot day, when the script can still change.

Post-production and distribution checks

If a campaign changes mid-flight, run the second list again on the amended cut. Do not assume the earlier check still holds, because a new voiceover or an added end card can change the meaning of the ad.

This guide is general information rather than legal advice. For a specific campaign, contract or employment question, take advice from a qualified solicitor, employment adviser or data protection practitioner.

Common questions

Do UK advertising rules apply to social media video ads?

Yes. The CAP Code covers non-broadcast advertising, including paid and organic social content that promotes a product or service. The ASA can act on complaints and use the sanctions listed on its site, from requiring removal of an ad to referring repeat offenders onward.

What data protection duties apply to video marketing campaigns?

The UK GDPR applies whenever you collect or use personal data, such as emails from a lead form or viewer analytics. You need a lawful basis, a clear privacy notice and a route for subject access and deletion requests. The ICO can fine businesses that get this wrong, and PECR adds separate rules for cookies and pixels.

Can an agency be liable for a client's misleading claims?

Yes, in some circumstances. An agency that creates or places advertising can be caught by the codes even when the underlying claim came from the client. Contracts should allocate responsibility for substantiation, and the agency should still query anything it cannot verify.

Do minimum wage rules apply to freelance video crews?

They apply to employees and workers, not to people who are genuinely self-employed. Some freelancers are workers in law because of the control and integration in the engagement, so check each arrangement rather than relying on the contract label. Take advice if the status is unclear.